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A Formal Traffic Characterization of LTI 
Event-triggered Control Systems 
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Abstract —Unnecessary communication and computation in the 
periodic execution of control tasks lead to over-provisioning in 
hardware design (or underexploitation in hardware utilization) 
in control applications, such as networked control systems. To 
address these issues, researchers have proposed a new class 
of strategies, named event-driven strategies. Despite of their 
beneficiary effects, matters like task scheduling and appropriate 
dimensioning of communication components have become more 
complicated with respect to traditional periodic strategies. In 
this paper, we present a formal approach to derive an abstracted 
system that captures the sampling behavior of a family of event- 
triggered strategies for the case of LTI systems. This structure 
approximately simulates the sampling behavior of the aperiodic 
control system. Furthermore, the resulting quotient system is 
equivalent to a timed automaton. In the construction of the 
abstraction, the state space is confined to a finite number of 
convex regions, each of which represents a mode in the quotient 
system. An LMI-based technique is deployed to derive a sampling 
time interval associated to each region. Finally, reachability 
analysis is leveraged to find the transitions of the quotient system. 


Index Terms —Event-triggered control, timed automata, LMI, 
formal methods, reachability analysis. 

I. Introduction 

I N networked control systems, particularly over wireless or 
shared channels, the scarcity of communication resources 
makes the application of traditional control strategies with 
periodic sampling inefficient. Alternative approaches with ape¬ 
riodic sampling, such as event-triggered control (ETC) and 
self-triggered control (STC), have been recently proposed to 
reduce network usage. The underlying idea in these approaches 
is to take into account the dynamics of control systems in the 
sampling procedure, to only use the communication channel 
when strictly necessary. 

In these approaches, control actions are executed at the 
instants that a pre-specified condition, the so-called trigger¬ 
ing mechanism, is violated. In ETC, an intelligent sensory 
system continuously monitors the states of the control plant 
and determines the instants when the triggering condition is 
violated U). ETC has been also used under other names, such 
as interrupt-based feedback control Q, Lebesgue sampling 
1^, asynchronous sampling Q, state-triggered feedback Q, 
and level crossing sampling Q. The necessity of an intelligent 
sensory system in ETC motivated researchers to propose 
another class of aperiodic approaches, namely STC Q. In 
STC, the controller is responsible for the determination of 
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sampling instants, i.e., the next sampling instant is computed 
at the current sampling instant by the controller 0-II3- 
However, the robustness of STC strategies against disturbances 
is a concern because of the open-loop nature of the con¬ 
trol action implementation between two consecutive sampling 
instants (notice that this is not an issue in ETC strategies 
which continuously supervise the plant). The assumption of 
availability of states in the feedback path is addressed in an 
extension to output-feedback event-triggered strategies in |TT). 
Most of the aforementioned approaches focus in decreasing 
the (computation and communication) resource utilization of 
real-time control systems. Nonetheless, there is a lack of 
tools to translate such approaches to frameworks that can 
be exploited by computer engineers in designing real-time 
systems. Providing such frameworks shall enable the reduction 
of hardware over-provisioning in the design process. 

Several controller/scheduler co-design approaches of real¬ 
time systems can be found in the literature, e.g. feedback 
modification to task attributes Gg-Gg, anytime controllers 
nd event-based control and scheduling GD. G2)- 
I, the principles of feedback control theory were 
used to integrate scheduling and control in real-time system 
designs. GD and G3 deployed the concept of anytime con¬ 
trollers in their co-design approaches in which there is a trade 
off between control performance and computation complexity. 
The problems of resource utilization and resource distribution 
have been jointly addressed in pg , | |l9) . These approaches 
include designing of a control law, a scheduler, and an event 
generator. The control law enhances the performance while 
the scheduler and event generator improve the efficiency of 
the resource usage. In the present paper we take an alternative 
approach providing a decoupling between controller design, 
event-triggered implementation and the scheduling design. 
Such decoupling between control and scheduling has the 
benefits of increased scalability and versatility of networked 
controller designs, with respect to monolithic co-design ap¬ 
proaches as those mentioned earlier. 

While in traditional periodic implementations of controllers 
the decoupling between control and scheduling is naturally 
provided by the period defining the frequency at which the 
control loop must be updated, in ETC and STC the matter 
is more involved. The triggering mechanism in ETC results 
in aperiodic control systems, in which sampling is a function 
of time and/or states, and thus no single parameter provides 
the necessary information for appropriate scheduling. In this 
study, we take one step further to complement a family of 
ETC strategies by abstracting their sampling behavior into 
simple structures that can be employed by real-time engineers 
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for scheduling (and possibly network dimensioning). The 
objective of this paper is thus to model the traffic generated 
by aperiodic ETC control systems, understood as all possible 
traces of sampling times. We achieve this by mapping the 
initial control system (which is inhnite-state) into a type of 
quotient system (which is hnite-state) called power quotient 
system. We show that the power quotient system is in fact a 
timed automaton pO) , and that it captures the original timing 
behavior accurately. The latter is shown by establishing an 
approximate simulation relation between the abstraction and 
the original system. 

We consider linear time invariant (LTI) systems with state 
feedback laws and sample-and-hold control actions imple¬ 
mented in an ETC fashion as in |2T). Our procedural technique 
is inspired by a state-dependent sampling proposed by | |22| 
where the ^-stability | [2^ of the system’s origin is guaranteed 
based on an LMI-based approach derived from Lyapunov- 
Razumikhin stability conditions |24|. These conditions are 
developed based on the delayed nature of the system (related 
to the sample-and-hold nature of such systems) suggested 
by | |25| . Inspired by | |22) , we employ a two-step approach 
to compute sampling intervals associated to states: first, to 
remove the spatial dependencies, the state space is partitioned 
(abstracted) to a finite number of convex polyhedral cones 
(pointed at the origin); then, to remove the temporal dependen¬ 
cies, each conic region is associated to a time interval by using 
a convex embedding approach proposed by . Each of these 
time intervals captures all possible inter-sample times of the 
corresponding region. To derive the desired quotient system, 
each conic region is considered as a discrete state (mode). 
Then, in order to derive the transitions of the quotient system, 
a reachability analysis is performed employing the sampling 
intervals computed earlier. This analysis is an extension of an 
approach proposed by | [27| for continuous autonomous sys¬ 
tems, namely outer approximations of reachable sets by a set 
of convex poly topes. Einally, we show that the derived quotient 
systems are in fact equivalent to a timed safety automata | |28t 
{timed automata pO) without accepting conditions). 

The organization of the remainder is as follows. The math¬ 
ematical preliminaries and problem setup are presented in 
Section |I^ The formal methodology to construct the timing 
abstraction is explained in Section III In Section IV the main 
results of this paper are summarized. Einally, an illustrative 
example is introduced in Section IV] and the paper is concluded 
with a brief discussion in SectionTvIl 


II. Preliminaries and Problem Setup 
In this section, we provide hrst the mathematical notation 
and revisit dehnitions of some notions employed in the paper. 
Next, we reformulate as a quadratic function of states at 
sampling instants the Input-to-State-Stability (ISS) based ETC 
approach proposed by ID for LTI systems. Einally, the 
problem of deriving a structure that captures the sampling 
behavior of the ETC system is formalized. 


A. Mathematical Preliminaries 

In what follows, M" denotes the n-dimensional Euclidean 
space, M+ and Kj}" denote the positive and nonnegative reals. 


respectively, N is the set of positive integers, and M'*’ is the 
set of all closed intervals [a, b] such that a,b G M“'' and a < b. 
Eor any set S, 2^ denotes the set of all subsets of S, i.e. the 
power set of S. Aimxn and AAn are the set of all m x n real¬ 
valued matrices and the set of all n x n real-valued symmetric 
matrices, respectively. Eor a matrix M, M < Q (or M > Q) 
means M is a negative (or positive) semidehnite matrix and 
M >- 0 indicates M is a positive definite matrix. [tJ indicates 
the largest integer not greater than t S K and |j/| denotes the 
Euclidean norm of a vector y G K". Given two sets Za and Zt,, 
every relation Q C Za x Zi, admits Q~^ = {(zb, Za) G Zb x 
Za\(,Za, Zb) G Qj as its inverse relation. When Q C Zx Z is an 
equivalence relation on a set Z, [z] denotes the equivalence 
class of z G Z and ZjQ denotes the set of all equivalence 
classes. 

A fundamental observation that we employ in what follows 
is that the ordered pair is a metric space: 

Definition 1. (Metric j29|/) Consider a set T, d : T x T ^ 
KU{-|-(X)} is a metric (or a distance function) if the following 
three conditions are satisfied Vt, y, z G T: 

1) d{x,y) = d{y,x), 

2) d(x,y) = 0^ x = y, 

3) d(x,y) < d{x,z) + d{y,z). 

The ordered pair (T, d) is said to be a metric space. 

Definition 2. (Hausdorjf Distance ( [29^ ) Assume X and Y are 
two non-empty subsets of a metric space (T, d). The Hausdoiff 
distance dH{X,Y) is given by: 

maxjsup inf d(x, y), sup inf d{x, y)}. 

xeXV^Y 

We also employ the framework from pO) to establish 
relations between different systems. Some relevant notions 
from that framework are summarized in the following: 

Definition 3. (System SfiU}) A system is a sextuple 
(X, Xq, U, —>, Y, H) consisting of: 

• a set of states X; 

• a set of initial states Xq C X; 

• a set of inputs U; 

• a transition relation —X x U x X; 

• a set of outputs Y; 

• an output map H : X ^ Y. 

The term finite-state (or infinite-state) system indicates X 
is a finite (or infinite) set. We employ the shorthand S = 
{X, U, —>) to denote a system when X = Xq = Y and 
H •. X ^ X is the identity map. 

Definition 4. (Metric System 1)30^ ) A system S is said to be a 
metric system if the set of outputs Y is equipped with a metric 
d:Y xY 

Definition 5. (Approximate Simulation Relation Con¬ 

sider two metric systems Sa and Sb with Ya = Yb, and let 
e G MjJ". A relation R C Xa x Xb is an e-approximate 
simulation relation from Sa to Sb if the following three 
conditions are satisfied: 

1) Vxao G Xa 0 ,^Xb 0 G Xbo such that {Xao,Xbo) G R; 

2) \/{xa,Xb) G Rwe have d(Ha{xa),Hb{xb)) < e; 
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3) y{xa,Xb) S R such that {xa,Ua,x'^) G — > in Sa im- 

a 

plies 3(xt,, Mb, xj,) G—> in St satisfying [x'g^^x'f) G R. 

b 

We denote the existence of an e-approximate simulation 
relation from Sa to Sb by Sa Sb, and say that Sb e- 
approximately simulates Sa- Whenever e = 0, the inequality 
d{Ha{xa),Hb{xb)) < e implies Ha{xa) = Hb{xb) and the 
resulting relation is called (exact) simulation relation. 

Finally, we propose an alternative notion of quotient system 
(see e.g. p0| for the traditional dehnition) to suit our needs: 


Definition 6. (Power Quotient System) Let S = 

(X, Xq, U, —Y, H) be a system and R be an equivalence 

relation on X. The power quotient of S by R, denoted 

by S/R, is the system {X/r,X/ro,U/r,^,Y/r,H/r) 

/R 

consisting of: 


XiR = XIR; 

^/Ro = {x/R y ^/r\x/r n Xq 0}; 

U/R = U; 

(x/R,u,x'^j^) S—>■ if 3(x,u,x') S—)■ in S with x G x/r 
! R 

and x' G x'. 


IR’ 

Y/r C 2^; 

H/r{x/r) = U H(x). 

x^x ! 


In the following lemma, we provide a result establishing the 
relationship between a power quotient system and the original 
system. 


Lemma 1. Let S be a metric system, R be an equiva¬ 
lence relation on X, and let the metric system S/r be 
the power quotient system of S by R. For any e > 
^a^xex,R,x^!iex/Rd{H{x),H/R(x/R)), with d the Haus- 
dorff distance over the set 2^, S/r ^-approximately simulates 
S, i.e. S S/R. 

Proof. Let us consider the candidate simulation relation: Rg C 
X X X/R, where {x,x/r) G Rs if and only if x S x/r. From 
Dehnition the three conditions in Dehnition immediately 
follow. □ 


Note that we are using the fact that for a given set Y,Yc 
2^ in order to use the Hausdorff distance as a common metric 
between the output sets of the power quotient system and the 
concrete system. 

In Section III-C we also employ the notion of flow pipe |271 
to discuss reachable sets: 


Dehnition 7. (Flow Pipe) The set of reachable states or the 
flow pipe from an initial set in the time interval [ts,Ts] 

is denoted by: 

U Xt{Xo,s) 

iG[r,,r,] ’ 

where Xt(XQ s) denotes the reachable set at time t from Xq.s, 
given by: 


compactness, the presentation in | [3T) . For details on timed 
(safety) automata we refer the interested reader to the original 
works | |20l , ITS) . 

Assume a hnite alphabet E (actions), and let C be a set of 
hnitely many real-valued variables (clocks). Consider {> 
,>,<,<}, a clock constraint 5 is a conjunctive formula of 
atomic constraints ci ~ fc or ci — C 2 fc for ci, C 2 G C, and 
k gN. We denote by B{C) the set of clock constraints. A clock 
valuation (or assignment) is a mapping of the form C —M,}. 
Let u G (MjJ")*" be a clock valuation and g G B{C), then u\= g 
(u satishes g) iff g evaluates to true using the values from u. 
For d e Mq , (u + d){c) := u{c) + d, Vc e C. For c C C, 
[c — 0]u is the clock assignment that maps all clocks in c to 
0 (a vector with all entries equal to zero of the same size of 
c) and agrees with u for the remaining clocks in C \ c. 

Dehnition 8. (Timed Safety Automata 0^) A timed safety 
automata is a tuple A= (L,Lo, Y,,C, E,Rnwhere 

• L is a finite set of locations (or discrete states); 

• Lq C L is a set of start location^ 

• E is the set of actions; 

• C is the set of clocks; 

, EC Lx B(C) xYx2^ X L is the set of transitions. 

• I : L —> B(C) assigns invariants to locations. 

We use the shorthand notation I —>- I' when 
{l,g,a,r,f) G E, representing a transition from state I to 
state I' on input symbol a. The set r C C indicates the clocks 
to be reset with this transition, and p is a clock constraint over 
C (a guard condition). 

Dehnition 9. (Operational Semantics (^31’^ ) The semantics of 
a timed safety automaton is a transition system (also known 
as timed transition system) where states are pairs (l,u), with 
I G L and u a clock valuation, and transitions are defined by 
the rules: 

• (I, u) —^ (I, u-\- d) if u \= 1(1) and (u + d) G I{1) for 
a nonnegative real d G K'*'; 

• (l,u) —^ if I u \= g, u' = \r ^ 0]m 

and u' \= I{1'). 

It is worth remarking that the guards of a command assert 
necessary conditions for the transitions to take place, while 
invariants assert sufficient conditions for transitions to take 
place, and must not be violated by letting time advance. Thus, 
invariants establish upper bounds for the time to the next 
transition (to a different location) fTS). 


B. LTI Event-Triggered Control System 

Consider linear time invariant (LTI) systems without distur¬ 
bances given by: 

^(t) = A^(t) + Bv(t), ^(t) G M", v{t) G M’” (3) 


A’b(Xo,«) = U,o(f)|xoGXo.J. 


( 2 ) 


Finally, in Section |IV-B| we discuss the embedding of 
the constructed abstractions in the form of timed safety 
automata |28| (TSA). We revisit that notion following, for 


^Although technically not necessary, for clarity we extend the original 
definition to explicitly state the actions’ and clocks’ sets. 

^Note that for later convenience, and without any impact on the expressivity 
of the model, we slightly modify the definition of |3H to allow several possible 
initial locations as in the original works of |20| , |2o| . 
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with linear state-feedback laws implemented in a sample-and- 
hold manner; 

v{t) = v{tk) = yt G [tk,tk+i), fc G N. (4) 

Let us denote by ^x{t) G M" the solution of ([^-Q for t G 
[ffc, tk+i] with ^x{tk) = X as its initial condition. Furthermore, 
let us denote by e^it) := x — ^x{t) the virtual error introduced 
by the sampling mechanism. We consider the event triggering 
approach proposed in |j2T| which enforces sampling instants 
given by conditions of the form; 

4+1 = min{f > tk\ \ex{t)\^ > a\^x{t)f}, (5) 

for some appropriate design parameter a G K"*". 

Let the sampling period associated to a state ^(4) = a; be 
denoted by t{x) := 4+i — 4- Then, the values of ^x and 


Cx can be expressed in terms of x, for cr G [0, tk+i 

- tk] as 

follows; 

^x(tk + cr) = A(cr)a;, 

(6) 

ex{tk + cr) = [/ - A(cr)]a; 

(7) 

where 

A(ct) = [J + /o" e^^dr{A + BK)]. 

(8) 


Thus, substituting (|^ and Q in the following expression 
for the state-dependent sampling period is obtained; 


t{x) = min{fT > 0| x^^{a)x = 0}, (9) 

where 

$(a) = [/ - A^(ct)] [/ - A(ct)] - aA^((T)A(a). (10) 

C. Problem Statement 
Consider the system; 

S = {X,Xo,U,^,Y,H) 


Xo/v = I Xo n ^ 0}; 

U/-p = 0, i.e. the system is autonomous; 

{x/-p,x’i^) G—>■ if 3a; G Xj-p, 3a;' G x'^^ such that 

^x{H{x)) = x'; 


p + . 


Y/p C 2^ C 
H/p{x/p) = [ min H{x), max H{x)\ ;= [tx 


C/JJ 


E/p 


The remaining question is now how to; select an appropri¬ 
ate equivalence relation V, compute the respective intervals 
[Tk/p ) Lr/p], and determine when there is a transition between 
a pair of abstract states {x/p,x'i^). These three questions, and 
the respective constructions, are addressed in the following 
section. 


III. Construction of the Abstraction 

In this section, we address the construction of Sjp, and 
more specihcally X/p, H/p, and —The set X/p and map 

Hjp are constructed employing a two-step approach inspired 
by the work in | |22) . Nonetheless, some modifications are 
introduced to make that approach suitable to our goals. In 
1221 the minimum inter-sample times, r^, are computed for 
conic regions and Lyapunov-Razumikhin stability conditions. 
We adapt that approach (in our Lemma and Theorem [T]) 
to apply instead to the ISS based triggering mechanism in 
More importantly, we modify the approach to also 
provide upper limits, 4, on the regional inter-sample times 
(see our Lemmaand Theorem]^. We also propose, inspired 
by the work on stability analysis of switched systems using 
multiple Lyapunov functions p2) , a modihcation to the way 
the S-procedure is employed in ||22) for n-dimensional state 
spaces with n > 3 (see Theorems |T[and|^. Finally, we suggest 
to use a reachability analysis like the one in | [27) in order to 

construct the transition relation —>. 

IV 


where 

. X = M"; 

. Xo C K"; 

• (7 = 0, i.e. the system is autonomous; 

• —^-G X X U X X such that Vx,x' G X : (x,x') G —> 
iff ?a:(T(a;)) = x'; 

. FcK+; 

• H K+ where H(x) = t(x). 

The system S generates as output sequences all possible 
sequences of inter-sampling intervals that the system ([^-Q 
with triggering condition Q can exhibit. Note in particular 
that S is an inhnite-state system. 

Problem 1. We seek to construct power quotient systems S/p 
based on adequately designed equivalence relations V defined 
over the state set X of S. 

In particular, we propose to construct the system S/p as 
follows; 

S/p = {X/p,Xq/p,U/ p,-i/^,Y/p,H/p) 

where 

• X/-p = ;= {7?.i,...,72.g}; 


A. State Set 


The following observation is the cornerstone in removing 
spatial dependencies from (j^ and mapping the infinite-state 
system 5 to a finite-state system S/p. 


Remark 1. Excluding the origin, all the states which lie on a 
line that goes through the origin have the same inter-sample 
time, i.e., t{x) = t{Xx), VA 0 /22 ( 


Based on Remark [T] and the fact that a convex polyhedral 
cone (pointed at the origin) is the union of an infinite number 
of rays, a convenient approach to partition the state space is 
via abstracting it into a finite number of convex polyhedral 
cones (pointed at the origin) TZg where s G q} and 

Us=i = K" (see Figure [^. 

The state space abstraction technique proposed by p^ , 
called isotropic covering, is briefly explained in the following. 
Generalized spherical coordinates x G M" ; {r,di, ..., 9 n - i ) 
are used for the abstraction purpose, where r = |x| and 
Oi,..., 9n-i are the corresponding angular coordinates of x 
and 9i,... ,9x1-2 G [Ojt] and 0„_i G [—tt, tt]. Each angular 
coordinate is divided into m (not necessarily equidistant) 
intervals. Hence, the number of conic regions q is equal to 
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Figure 1. An illustrative 2-dimensional example of the state space abstraction 
using convex polyhedral cones. 


j^(n-i) 1221 for more details on constructing these state 

space partitions). Remark [T] also suggests that it suffices to 
only consider half of the state space since x and —x behave 
in the same way in Q. Therefore, one can consider half of 
the state space (for example, by assuming G [0,7r]), and 
then appropriately map the results to the other half of the state 
space. In this case, q is equal to 2 X The resulting 

polyhedral cones admit the following representations: 


TZs = {a; G K^l x^QsX >0}, ifn = 2 

TZs = {a; G K"! i?sa; > 0}, ifn > 3 (11) 


for s G {1,..., q} and some appropriately designed matrices 
Qs = G Al 2 (K) or Es G Al„xp(]R) with p <2n — 2. 


B. Output Map 

We focus now on the construction of the output map 
Hpp (and the output set Yjp in the process). We propose a 
constructive method to find a time interval [ts , Tg] associated to 
each region TZs such that Va: G Tl-s '■ t{x) G [Tg,fs], with t (-) 
as in 0. We construct convex polytopes around the matrix 
$(cr) (see p^), resulting in LMIs which combined with the 
S-procedure allows us to find bounds jg and fg on the different 
regions as specified in the previous subsection. 

We illustrate first how to derive jg so that in the time interval 
[0, Tg] no triggering is enabled. The main idea of the following 
lemma is to construct a finite set of matrices T’k.s, with k G /Cg 
(a finite set of indices), such that: 

(a;^$K,ga; < 0 ,Vk G Kg) {x^^{a)x < 0,Vct G [0 ,Ts]). 

Let the scalar a > 0 denote a time instant for which 
the triggering mechanism 0 is enabled in the whole state 
space, i.e., a:^<l>(tf)a: > 0,Va; G K" (Remark addresses 
the selection of a). Select an integer N^onv > 0 such that 
-Vconu + l is the number of vertices considered for the polytope 
containing $(cr), and an integer I > 1 determining the number 
of time subdivisions considered in the time interval [0,(7]. 

Lemma 2. Consider a time limit Tg G (0, d]. If 

< 0 , 

V(z, j) G /Cg = ({0, . . . , N,onv} X {0,..., L^J}), 

a 


then 

x'^^{a)x < 0,Vct G [OjTg], 
with $ as in and 


$ 


(ij).s 


n=oLkAis-fr j = 


■■= [(1 - a)nl^ 

+UIA1-0 

Lk>2,j ■= [(1 - 


L- + (1 

- a)Ul^U 

- 


)ni., - 

A 

JIA*- 

-'J k\ 

n2,i 

-[(1-a 

’ — 1 

1 1 


k-1 (A 


Hi-ocMAUZl 

Upj :=I + MAA + BK), 
:=NAA + BK), 


- 1 st .k-i-1 


(k-i)t )A2 ,j, 

(13) 

(14) 


Mj := Nj := AMj + I, 


(15) 


and 
V > 

where 


max Amax($(CT' + Tf) - $Ar_,^(cr')), 

it'G[ 0, j], rG{0,...,Z —1} 

(16) 


:= Y^kfl- Lk,ra'Z 

Proof. See Appendix. 


(17) 

□ 


Then leveraging the S-procedure the following theorem 
provides an approach to regionally reduce the conservatism 
involved in jg estimates obtained from Lemma 

Theorem 1 (Regional Lower Bound Approximation). Con¬ 
sider the inter-sampling time set {h,... ,Tq\ and matrices 
§K.,s satisfying Vs G {1,..., g}, Vk = {i,j) G /Cg, 0 < Tg < 
d, $K,g f 0. If there exist scalars > 0 (for n = 2) or 
symmetric matrices with nonnegative entries (for n > 3) 
such that the LMIs 


^k.s+£k,sQs fiO if n = 2 (18) 

^0 if n> 3 (19) 

hold, then \/x G TZg determined by (1Z3 the inter-sample time 
0 of the control system 00 is regionally bounded from 
below by Tg. 


Proof The result is a direct consequence of applying a lossless 
(if n = 2) or a lossy (if n > 3) version of the S-procedure: if 
the stated conditions hold then, for every x G K", x^QgX > 0 
(x^E'ZUK,gEgX > 0) implies that x^^k.,sX < 0. From (111 
we have that x'^QgX > 0 (EgX > 0) iff x G TZg. Thus one 
can conclude that for every x G TZg, x'^^^^gX < 0 and by 
Lemma 1^ the result follows. □ 


A similar approach can be employed to compute upper 
bounds fg of the regional inter-sample time. This is summa¬ 
rized in Lemma [3 and Theorem |2] 
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Lemma 3. Consider a time limit Tg G (t^, tr]. If 


V(z,j) e/C, = {{0,...,N,onv} X .,;-!}), 

a 


then 


a;^<i>(tT)a; > 0, Vcr S [Ts,cr], 
with <i> as in and 


I ELo^^u(f)'^ */j>L¥J> 

( 20 ) 

, ^max Ami„($(cr'+ rf) - l>Ar_,r(CT')), 

( 21 ) 


and Lkj given by {13\. 
Proof. See appendix. 


□ 


C. Transition Relation 

In this subsection, we address the construction of the 

transition map —>. To do so, each conic region is considered 

iv 

as a discrete mode of Sj-p and a reachability analysis is catered 
to derive all possible transitions in Sjp. 

We consider initial sets Xo,s in each TZs which are polytopes 
with their vertices lying on the extreme rays of TZg excluding 
the origin, e.g. for a two dimensional system the initial sets 
will be line segments connecting the boundary rays of the 
respective TZg sets. This selection is justified by the following 
facts: states that lie on a line going through the origin have 
an identical triggering behavior (see Remark [^i; these states 
are mapped to another line that goes through the origin (since 
the state evolution (|^ is a linear map on x); and the image 
of a convex polytope under a linear map is another convex 
poly tope. 

Given Xg.s in T^s with corresponding Pg and fg, we seek 
first to derive a polytopic outer approximation (Xo,s) 

to the flow pipe (Xo,s), i.e. 


Theorem 2 (Regional Upper Bound Approximation). Con¬ 
sider the inter-sampling time set {fi,...,fg} and matrices 
satisfying Vs S g}, Vk = (i,j) G ICg = 

({0, ...,iVco™}x{[^J,...,Z-l}), Tg <fg < d, h 0. 
If there exist scalars s^^g > 0 (for n = 2) or symmetric 
matrices U^.s with nonnegative entries (for n > 3) such that 
the LMIs 

- £h,sQs h 0 if n = 2 (22) 

^H.,g- EfUi^^gEghO if n> 3 (23) 


hold, then Vx G TZg determined by (23 the inter-sampling 
time 0 of the control system 20 is regionally bounded from 
above by fg. 

Proof. Analogous to the proof of Theorem [T] □ 


A procedural algorithm illustrating the use of Theorems [T] 
and 1^ in practice to compute Tg and fg is as follows: 

1) Derive v using Consider s = 1 in Theorem 

Implement a line search on r' in the interval [0, d] to 
find the lower bound on the inter-sample time in the 
whole state space. 

2) Partition the state space into q regions and again use 
Theoremj^to find {ri, ... ,Tq\. This optimization prob¬ 
lem is a line search on Tg in the time interval [j', tf] 
combined with LMI feasibility problems on £^,8 or 

at each line search iteration. 

3) Derive v using (21 1 and then use Theorem]^ to find fg. 
This problem is a combination of a line search on fg in 
the time interval [ig^d] with LMI feasibility problems 


on 


or [/„ 


Remark 2. To the best of our knowledge, there is no formal 
result establishing an upper bound d to Tg and fg. In practice, 
nonetheless, a line search is sufficient: increasing the value of 
d until the derived values of Tg and fg satisfy Tg,fs < d. 


Several methods can be catered to solve this problem, in 
particular we employ in our implementations the approach 
from 123 . A generic approach to reduce the conservatism 
of the approximation, also employed in |27|, is to divide 
the time interval [jsjfs] into / subintervals and compute an 
over approximation as the union of a sequence 

of convex polytopes (Aro,^), V/ S {!,...,/} with 

h = Is and = fg-. 


'^[Ta,Ta](2f0,s) — y (24) 

In order to derive the transitions in S^p, the intersection 
between the flow pipe corresponding to each region TZg and 
the initial conic regions need to be founded. This can be done 
by solving the following feasibility problem for each pair of 
conic regions {TZs,TZgi): 


Teas Cf^gX < d*j g 

Egix > 0 


(25) 


where {x G M”| Cf^gX < d*j: g} represents the outer ap¬ 
proximation of the /-th flow pipe segment associated with 
TZg, and {x G IR"| Eg'X > 0} is the initial conic region 
where s' G {1,..., g}. The feasibility of (251 for any value of 
/ G {!,...,/} indicates that there is a transition from mode 


s to mode s' in S 


/V- 


IV. Main Results 

A. e-Approximate Simulation Relation 

We summarize in the following theorem the main result of 
the paper. 

Theorem 3. The metric system 

S/p = (X/p, Xoip,U/p,^/jf,Y/p, H/p), 
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e-approximately simulates S where e = maxdLr(y, j/'), y = 
H{x) eY,y' = Hpp{x') e YlV, 'i{x,x') G V, and •) 
is the Hausdorjf distance. 

Proof. This is a direct consequence of Lemma [T] and the 
construction described in the previous section. □ 

Remark 3. Refining the conic regions of a given abstraction 
into a lager number of conic regions TZg, q, the length of the 
sampling intervals in each region |ts — Is\ cannot increase. 
Thus, increasing q results in abstractions with a new precision 
e' < e where f is computed based on the refined state space 
abstraction. Note that this is not necessarily the case if the 
partition of the state-space in the new abstraction is not a 
refinement of the original abstraction. 

B. Timed-Automaton Representation 

Finally, we show that Sj-p is in fact equivalent to a TS A. Re¬ 
gardless of TSAs uncountable state space (related to its clock 
variables), it has been shown that its reachability analysis is 
decidable | |20) . This fact makes TSA a powerful tool to model 
real-world systems, such as real-time systems, where discrete 
transitions are coupled with timing constraints. Several tools, 
exploring the attractive features of TSA, have been developed 
for verification and synthesis p?) and p4) . 

In the following, the semantics of Sjp is spelled out. The 
corresponding output y/p G Yjp of a state xjp G -A/p 
indicates that Sjp'. 

1) remains at xjp during the time interval 

2) possibly leaves xjp during the time interval 

and 

3) is forced to leave Xjp at 

Assume for simplicity that Sjp has a single initial state. 
Based on Definition and the previous description, one can 
equivalently represent the same semantics expressed by Sjp 
with the TSA (L, Lq, E, C, E, I) where; 

• the set of locations L := Xjp = {li,... ,lq}', 

• the initial location Lq := Xgjp-, 

• the set of actions E = {*} is an arbitrary labeling of 
discrete transitions (or edges); 

• the clock set C = {c} contains a single clock; 

• the set of edges E is such that {ls,g,a,r,lsi) G E iff 

L Is', g = {is < C < Ts}, a = *, and r = {c := 0}; 

• the invariant map I (Is) ■= {0 < c < Ts}, Vs G 

g}. 


V. Numerical Example 

In this section, we illustrate the results of this study. 
Consider a linear system, employed in the example in H). 
with state feedback law that is given by; 


m 


0 1 

-2 3 


+ 



(26) 


o{t) = [l -4]^(f). 


We set the triggering coefficient a = 0.05, the order 
of polynomial approximation N^onv = 5, the number of 


polytopic subdivisions I — 100, the number of angular 
subdivisions m = 10 (hence, the number of conic regions is 
q = 2 X = 2 X 10^^“^^ = 20), the upper bound of the 

inter-sample interval if = 1 sec, and the time step employed 
to subdivide the flow pipe segments is 0.01 sec. 

Figure [^depicts and for the closed loop system given 
by (|%l using Theorem [T] and Theorem respectively. In 
Figure ^ another representation of and fg is given in the 
state space. Based on the Hausdorff distance and the derived 
boundaries, one gets that in this example the precision of the 
abstraction is e = 0.119. 


Lower and upper bounds of regional inter-sample times 



Figure 2. Lower and upper bounds approximation of regional inter-sample 
times are depicted by solid and dashed curves, respectively. 


Regional lower and upper limits of sampling period 



xi 


Figure 3. Lower and upper bounds approximation of regional inter-sample 
times are depicted by solid and dashed lines, respectively. The distance to the 
origin of each asterisk (circle) denotes the regional value of lower (upper) 
bound. 


Note that by increasing fh: Ts and fg will possibly shift 
upward and downward, respectively. By doing so, one can 
derive tighter bounds for the given event-triggered control sys¬ 
tem. Thus, a more precise e-approximate simulation relation 
from S to Sjp can be achieved. Figure shows a comparison 
between two different state space abstraction with tti = 10 
and 100. Evidently, partitioning half of the state space to 100 
regions instead of 10 regions leads to tighter bounds where 
e' = 0.021. 

Figure illustrates the validity of the theoretical bounds 
that we found for jg (black line) and fg (dashed line). The 
asterisks represent the inter-sample times sequence during 
5 sec simulation of the event-triggered control system. 

In Figure a schematic representation of the discrete 
transition of the resulting TSA is provided. Each asterisk 
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Bounds comparison for m = 10 and 100 



angle (rad) 


Figure 4. Comparison of two different state space abstractions with m = 10 
(the light shaded area) and m = 100 (the dark dashed area) for half of the 
state space. 


Triggering time sequence of the system 



Figure 5. Schematic representation of the fact that the triggering sequence 
induced by simulation of the the event-triggered control system (asterisks) is 
contained in the theoretical lower and upper bounds (solid and dashed lines, 
respectively). 


represents a transition from mode i (or TZi) to mode j (or 
TZj) where i and j are the horizontal and vertical coordinates 
of the asterisk, respectively. 


Intuitive representation of the quotient system 


20 |- 

d 
o 

‘bb 
^15 

'3 

o 
“ 10 



5 10 15 20 

initial conic region 


Figure 6. Schematic representation of the transitions in the hybrid automaton 
(or the timed automaton). 


analysis and scheduler synthesis. Thus, an interesting follow¬ 
up research direction is to exploit the already existing theory 
and synthesis tools for timed-automata to synthesize sched¬ 
ulers for event-triggered control loops. This is a significant 
contribution to the field of event-triggered control in terms of 
applicability. Until now the only possible schedulability check 
for a set of event-triggered control loops was limited to a 
conservative one employing the minimum inter-event interval 
as descriptor of each of the loops. In turn, such conservative 
analysis challenged the reasons to implement control loops 
in the event-triggered fashion versus the traditional periodic 
approach, as the advantages on bandwidth usage could not be 
catered to the network infrastructure. With our present results 
a less conservative check of schedulability is enabled allowing 
to effectively take advantage of the bandwidth savings on 
event-triggered implementations. Furthermore, given the direct 
trade-off between performance and bandwidth usage that the 
triggering mechanism provides, one can envision more flexible 
implementations of event-triggered control loops that gently 
adjust their performance to accommodate to network conges¬ 
tion. Additional follow-up lines of research are the extension 
of this abstraction results to systems affected by disturbances 
and to classes of non-linear systems. Finally, it seems also 
natural to explore the connection between the constructed 
abstractions in the form of TSAs and alternative abstractions 
employed to model aperiodic traffic in the literature such 
as the arrival curves employed on network and real-time 
calculus p5) . Establishing the link between those two will 
enable the use of tools from real-time calculus to appropriately 
dimension and design networks for systems involving event- 
based control loops. 


Appendix 

Proof of Lemma We provide a constructive proof in four 
steps. 

First: divide the time interval [0, a] into I subintervals. The 
aim of this step is to make the preparations to compute a 
precise estimation of <!)(•) by building I small convex em¬ 
beddings around it instead of building an overly conservative 
single embedding. For every time instant a G [0,rs], there 
exists j e {0, such that jj < a < {j + l)j. 

Define a' = a - jj {a' G [0,x], with x = f for j < 
and X = Ts — j J otherwise). 

Second: compute a polynomial approximation of <!)(•) 
over each subinterval. Employ the relation e^^dr = 
e^^dr + Jp e^''dr{A e^^dr + I) to simplify A((t) given 
in ([^ as: 


VI. Conclusion 

We have proposed an LMI-based approach which combined 
with a reachability analysis allows to derive a timed safety 
automaton that captures the sampling behavior of LTI systems 
controlled with an event-triggered control strategy. It has been 
shown that there exists an e-approximate simulation relation 
from the control system to the derived timed-automaton. These 
results provide a theoretical basis for automatic schedulability 


A(cr) = I + Mj{A + BK) + e^^drNj{A + BK) 


(27) 

with Mj and Nj as in (15l. Then, by defining two new 
> ni, 
rewritten as: 


matrices IIij and II 2 J as 


in (14 1 , equation © can be 


= nij -f e^'^drll2j. 


(28) 
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Replace e^'^dr by its Nconv — th order Taylor series 
expansion to approximate < 1 ) given by ([T 0 |), i.e.: 


fo o. EtT” 


(29) 


Remember that Nconv + 1 is the number of vertices we 
consider for polytopic embedding according to time. The 


^/fc 


with 


Taylor series expansion of $ is given by Efc=o 
Lkj defined in 0 - 

Third: bound the error introduced by the TVcon^-th order 
approximation of $ with a constant term. One can derive 
the A^conw-th order approximation of $ on the time interval 
-h l)f] using given in |l7|. Denote by 


RN^anvji'^') — ‘h(o') — ^6 Seek to compute a 

constant scalar z/ independent of a' such that RNoo^vdi^') — 
vl, to establish x"^^[a)x < 0 from < 

0. Since is symmetric i?Ar„„„,j(cr') ^ Xma.x{(T')I, 

where Amax(< 7 ') is the maximal eigenvalue of RNaon^di'^')’ 
and thus ly is provided by ([T^. 

Fourth: build a convex polytope that contains the matrix 
exponential function + vl '■ [0,x] Adn(R), 

using the method proposed in f2E\. From we know that 


if X^§(^ij)^sX < 0 , V(i,j) e /Cs = {{0,...,Nconv} 


L^J})> with the 

following holds + vl)x < 0 and as a result 

x'^^{a)x < 0, Vcr S [OjtJ. □ 

Proof of Lemma The proof of Lemma is analogous 
to the proof of Lemma with the following changes. In the 
first step now: for every a S [fs,d], 3j G {L%^J j • ■ ■; ^ ~ 1 } 
such that jj < cr < (j + l)j, we define a' = cr — jj 
(a' G [0,x], with X = (j -f l)f - for j = \J^\ and 

X = j for j > In the third step, now we seek 

to compute instead a constant scalar v independent of cr' 
such that RNaan'vJ — to establish a;^$(cr)a; > 0 from 
j(cr') + vl)x > 0. Since is symmetric, 

it follows RN^on^ji^') — Amin(o’')/, where Aniin(cr') is the 
minimal eigenvalue of RN^or,„,j{o'')- This constant can be 
computed now from pT]). In the fourth step, applying again 


the results from |26 
ICs = ({0,...,At< 


one has that x^^(^ij'j^sX > 0, V(i,j) € 

} X { L¥J - ■ • ’ ^ = 

ELo d-k,jX^ + vl, implies j (cr') -f vl)x > 0 and 

consequently a;^$(cr)a: > 0, Vcr G [fs,a-]. □ 


References 

[1] W. Heemels, K. Johansson, and P. Tabuada, “An introduction to event- 
triggered and self-triggered control,” in Proceedings of the 51st Annual 
Conference on Decision and Control, Dec 2012, pp. 3270-3285. 

[2] D. Hristu-Varsakelis and P. Kumar, “Interrupt-based feedback control 
over a shared communication medium,” in Proceedings of the 41st IEEE 
Conference on Decision and Control, vol. 3, Dec 2002, pp. 3223-3228. 

[3] K. Astrom and B. Bemhardsson, “Comparison of riemann and lebesgue 
sampling for first order stochastic systems,” in Proceedings of the 41st 
IEEE Conference on Decision and Control, vol. 2, Dec 2002, pp. 2011- 
2016. 

[4] P. Voulgaris, “Control of asynchronous sampled data systems,” IEEE 
Transactions on Automatic Control, vol. 39, no. 7, pp. 1451-1455, 1994. 

[5] P. Tabuada and X. Wang, “Preliminary results on state-trigered schedul¬ 
ing of stabilizing control tasks,” in Proceedings of the 45th IEEE 
Conference on Decision and Control, Dec 2006, pp. 282-287. 

[6] E. Kofman and J. Braslavsky, “Level crossing sampling in feedback 
stabilization under data-rate constraints,” in Proceedings of the 45th 
IEEE Conference on Decision and Control, Dec 2006, pp. 4423-4428. 


[7] M. Velasco, J. M. Fuertes, and P. Marti, “The self triggered task 
model for real-time control systems,” in Proceedings of the 24th IEEE 
Symposium on Real-Time Systems (work in progress), 2003, pp. 67—70. 

[8] A. Anta and P. Tabuada, “Self-triggered stabilization of homogeneous 
control systems,” in Proceedings of American Control Conference, June 
2008, pp. 4129^134. 

[9] M. Mazo Jr., A. Anta, and P. Tabuada, “An ISS self-triggered imple¬ 
mentation of linear controllers,” Automatica, vol. 46, no. 8, pp. 1310 - 
1314, 2010. 

[10] X. Wang and M. Lemmon, “Self-triggered feedback systems with 
state-independent disturbances,” in Proceedings of American Control 
Conference, June 2009, pp. 3842-3847. 

[11] M. Donkers and W. Heemels, “Output-based event-triggered control with 
guaranteed >Coo-gain and improved and decentralized event-triggering,” 
IEEE Transactions on Automatic Control, vol. 57, no. 6, pp. 1362-1376, 
2012 . 

[12] G. Buttazzo, G. Lipari, and L. Abeni, “Elastic task model for adaptive 
rate control,” in Proceedings of The 19th IEEE Symposium on Real-Time 
Systems, Dec 1998, pp. 286-295. 

[13] M. Caccamo, G. Buttazzo, and L. Sha, “Elastic feedback control,” in 
Proceedings of the 12th Euromicro Conference on Real-Time Systems, 
2000, pp. 121-128. 

[14] C. Lu, J. A. Stankovic, S. H. Son, and G. Tao, “Feedback control 
real-time scheduling: Framework, modeling, and algorithms,” Real-Time 
SysL, vol. 23, no. 1/2, pp. 85-126, 2002. 

[15] A. Cervin and J. Eker, “Control-scheduling codesign of real-time sys¬ 
tems: The control server approach,” Embedded Comput., vol. 1, no. 2, 
pp. 209-224, 2005. 

[16] R. Bhattacharya and G. Balas, “Anytime control algorithm: Model 
reduction approach,” Journal of Guidance, Control, and Dynamics, 
vol. 27, no. 5, pp. 767-776, 2004. 

[17] D. Fontanelli, L. Greco, and A. Bicchi, “Anytime control algorithms 
for embedded real-time systems,” in Hybrid Systems: Computation and 
Control, ser. Lecture Notes in Computer Science, M. Egerstedt and 
B. Mishra, Eds. Springer Berlin Heidelberg, 2008, vol. 4981, pp. 158- 
171. 

[18] S. Al-Areqi, D. Gorges, S. Reimann, and S. Liu, “Event-based control 
and scheduling codesign of networked embedded control systems,” in 
Proceedings of American Control Conference, June 2013, pp. 5299- 
5304. 

[19] S. Al-Areqi, D. Gorges, and S. Liu, “Stochastic event-based control and 
scheduling of large-scale networked control systems,” in Proceedings of 
European Control Conference, June 2014, pp. 2316-2321. 

[20] R. Alur and D. L. Dill, “A theory of timed automata,” Theoretical 
Computer Science, vol. 126, pp. 183-235, 1994. 

[21] R Tabuada, “Event-triggered real-time scheduling of stabilizing control 
tasks,” IEEE Transactions on Automatic Control, vol. 52, no. 9, pp. 
1680-1685, 2007. 

[22] C. Filer, L. Hetel, W. Perruquetti, and J.-P. Richard, “A state dependent 
sampling for linear state feedback,” Automatica, vol. 48, no. 8, pp. 1860- 
1867, 2012. 

[23] H. K. Khalil, Nonlinear systems. Upper Saddle River, (N.J.): Prentice 
Hall, 1996. 

[24] V. B. Kolmanovskii and A. D. Myshkis, Applied theory of functional 
differential equations, ser. Mathematics and its applications. Dordrecht, 
Boston: Kluwer Academic Publishers, 1992. 

[25] E. Fridman, A. Seuret, and J.-P. Richard, “Robust sampled-data stabi¬ 
lization of linear systems: an input delay approach,” Automatica, vol. 40, 
no. 8, pp. 1441-1446, 2004. 

[26] L. Hetel, J. Daafouz, and C. Lung, “Lmi control design for a class 
of exponential uncertain systems with application to network controlled 
switched systems,” in Proceedings of American Control Conference, July 
2007, pp. 1401-1406. 

[27] A. Chutinan and B. Krogh, “Computing polyhedral approximations to 
flow pipes for dynamic systems,” in Proceedings of the 37th IEEE 
Conference on Decision and Control, vol. 2, Dec 1998, pp. 2089-2094. 

[28] T. A. Henzinger, X. Nicollin, J. Sifakis, and S. Yovine, “Symbolic model 
checking for real-time systems,” Information and computation, vol. Ill, 
no. 2, pp. 193-244, 1994. 

[29] G. Ewald, Combinatorial convexity and algebraic geometry, ser. Grad¬ 
uate texts in mathematics. New York: Springer, 1996. 

[30] P Tabuada, Verification and Control of Hybrid Systems: A Symbolic 
Approach, 1st ed. Springer, 2009. 

[31] J. Bengtsson and W. Yi, “Timed automata: Semantics, algorithms and 
tools,” in Lectures on Concurrency and Petri Nets. Springer, 2004, pp. 
87-124. 





10 


SUBMITTED 


[32] R. DeCarlo, M. Branicky, S. Pettersson, and B. Lennartson, “Perspec¬ 
tives and results on the stability and stabilizability of hybrid systems,” 
Proceedings of the IEEE, vol. 88, no. 7, pp. 1069-1082, 2000. 

[33] R. Alur and R. P. Kurshan, “Timing analysis in cospan,” in In Hybrid 
Systems 111. Springer-Verlag, 1996, pp. 220-231. 

[34] K. G. Larsen, P. Pettersson, and W. Yi, “Uppaal in a nutshell,” Int. 
Journal on Software Tools for Technology Transfer, vol. 1, pp. 134- 
152, 1997. 

[35] L. Thiele, S. Chakraborty, and M. Naedele, “Real-time calculus for 
scheduling hard real-time systems,” in Proceedings of the IEEE Interna¬ 
tional Symposium on Circuits and Systems, vol. 4, 2000, pp. 101-104. 



